$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/158142d2-a6b7-34ca-be4a-89fc8257488f.roa File: 158142d2-a6b7-34ca-be4a-89fc8257488f.roa (raw, json) Hash identifier: bPUQbnOEAaDpWmCtF/sxhLwYvQi6Cv6Pa+il5ngxnXY= Subject key identifier: EB:A9:9C:AE:18:39:7D:DF:0F:0A:71:57:9F:E8:63:8C:CE:E6:30:8A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D00B23E4854695D7C02999B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/158142d2-a6b7-34ca-be4a-89fc8257488f.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 7029 IP address blocks: 66.32.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:3e:48:54:69:5d:7c:02:99:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=c74f860f-1858-47a1-abc4-39978343efc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ec:24:ad:0d:39:5e:21:76:26:02:6d:06:5a: 6b:12:79:5d:a9:3d:97:88:9a:e3:ca:61:2c:2c:2b: f5:d0:b6:4b:1e:f1:61:35:fc:5c:6a:e8:ad:60:9d: af:52:60:6c:fd:df:48:4e:9d:fa:20:39:ca:f5:32: fc:cf:70:fe:0f:24:08:aa:f8:dc:d1:34:37:32:c9: 47:84:95:c4:a0:44:9b:57:87:ae:cd:59:c3:ef:e4: ce:25:bb:82:90:d0:20:17:01:9f:bc:b4:cb:15:35: 18:15:82:68:6a:f8:de:75:35:92:9d:40:b6:f4:e5: 1e:52:cd:b3:51:34:ae:35:5a:64:15:77:99:3a:b8: cb:bb:46:c0:3e:03:2a:33:1f:b6:74:d7:a9:7d:c3: a3:5c:b5:be:c7:7c:98:cf:c1:1b:ae:93:de:06:85: e4:21:58:d0:71:ab:7e:2d:d3:bb:9e:b4:9f:9f:98: 6b:4f:45:d7:c1:e9:a1:aa:c2:ce:b3:d6:2b:70:13: b7:06:79:97:f5:79:45:89:29:b5:c0:95:b4:cc:02: 25:66:74:27:ca:7d:38:7d:9e:7a:63:fa:e6:db:49: 0e:e5:04:e6:3c:49:d9:7d:b2:8b:4f:2e:89:5c:d1: de:52:b9:5e:ad:f6:bf:a6:12:f7:03:ce:f3:7d:af: d7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A9:9C:AE:18:39:7D:DF:0F:0A:71:57:9F:E8:63:8C:CE:E6:30:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/158142d2-a6b7-34ca-be4a-89fc8257488f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.32.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:12:77:ae:e5:16:9b:cc:ba:c8:c5:09:0a:ed:79:d3:bf:43: 90:68:70:ab:1b:0d:ae:69:59:44:b5:df:37:fe:36:2b:a0:1c: 59:c5:c9:f4:1f:84:40:71:1e:e0:86:d2:ef:d9:43:1b:de:78: a2:84:cf:3f:61:bf:e2:a6:0d:12:fc:1f:27:ff:9d:f3:10:63: cc:bc:2f:2d:45:64:f1:ef:cb:8d:26:78:c4:01:b4:02:3a:d0: 82:d0:9b:ff:ed:b5:41:cb:59:08:6c:ca:8d:5a:2b:b4:c3:75: b8:b7:9b:d9:ae:6f:d1:bc:49:d1:79:d5:5c:d1:1b:b1:60:a5: 3b:f5:ff:55:95:05:5b:d0:e5:cd:c7:f7:97:43:3f:18:6a:44: 3f:91:b5:ac:dc:6d:f7:d4:3e:79:7c:0d:93:ca:3b:88:e1:ce: 66:ad:2f:e9:c9:12:1f:d7:58:a3:d8:b1:0d:dd:9d:79:92:33: a6:8d:fb:fc:18:10:3c:a9:a1:a0:9b:42:22:14:2f:e8:43:0d: ea:1d:fa:63:b9:30:ca:77:47:ca:45:c5:7d:32:b2:4e:e3:32: f7:bc:6d:6c:33:ec:ff:6a:60:69:53:d5:9c:13:89:ba:ad:6c: e0:64:eb:d1:10:07:8d:68:b4:36:d3:f3:9c:f1:0d:da:34:b6: 6d:aa:52:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Asj5IVGldfAKZmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk Yzc0Zjg2MGYtMTg1OC00N2ExLWFiYzQtMzk5NzgzNDNlZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjewkrQ05XiF2JgJtBlprEnldqT2XiJrjymEs LCv10LZLHvFhNfxcauitYJ2vUmBs/d9ITp36IDnK9TL8z3D+DyQIqvjc0TQ3MslH hJXEoESbV4euzVnD7+TOJbuCkNAgFwGfvLTLFTUYFYJoavjedTWSnUC29OUeUs2z UTSuNVpkFXeZOrjLu0bAPgMqMx+2dNepfcOjXLW+x3yYz8EbrpPeBoXkIVjQcat+ LdO7nrSfn5hrT0XXwemhqsLOs9YrcBO3BnmX9XlFiSm1wJW0zAIlZnQnyn04fZ56 Y/rm20kO5QTmPEnZfbKLTy6JXNHeUrlerfa/phL3A87zfa/XYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOupnK4YOX3fDwpxV5/oY4zO5jCKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTU4MTQyZDItYTZiNy0z NGNhLWJlNGEtODlmYzgyNTc0ODhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQiAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYSd67lFpvMusjFCQrtedO/Q5BocKsbDa5pWUS13zf+NiugHFnFyfQf hEBxHuCG0u/ZQxveeKKEzz9hv+KmDRL8Hyf/nfMQY8y8Ly1FZPHvy40meMQBtAI6 0ILQm//ttUHLWQhsyo1aK7TDdbi3m9mub9G8SdF51VzRG7FgpTv1/1WVBVvQ5c3H 95dDPxhqRD+RtazcbffUPnl8DZPKO4jhzmatL+nJEh/XWKPYsQ3dnXmSM6aN+/wY EDypoaCbQiIUL+hDDeod+mO5MMp3R8pFxX0ysk7jMve8bWwz7P9qYGlT1ZwTibqt bOBk69EQB41otDbT85zxDdo0tm2qUnQ= -----END CERTIFICATE-----Generated at Sun Mar 1 18:47:13 2026 by rpki-client